splitwise-mcp 3.1.0 → 3.1.2

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Splitwise — natural-language expense and group management via the Splitwise API",
-    "version": "3.1.0"
+    "version": "3.1.2"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Splitwise",
       "source": "./",
       "description": "MCP server for Splitwise — manage expenses, groups, and friends via natural language",
-      "version": "3.1.0",
+      "version": "3.1.2",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "splitwise-mcp",
   "displayName": "Splitwise",
-  "version": "3.1.0",
+  "version": "3.1.2",
   "description": "MCP server for Splitwise — natural-language expense and group management via the Splitwise API",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -126,7 +126,7 @@ Add to Claude Desktop config:
 | `sw_get_current_user` | Get the authenticated user's profile |
 | `sw_healthcheck` | Verify the API key and Splitwise reachability; says which of the two failed |
 | `sw_get_user` | Get another user's profile by ID |
-| `sw_update_user` | Update the current user's profile fields |
+| `sw_update_user` | Update the current user's name, locale or default currency (login email and password are not changeable here) |
 
 ### Groups
 

package/dist/bundle.js

@@ -4859,7 +4859,7 @@ var require_memoizer = __commonJS({
     var NONE2 = 0;
     var ASSUMED2 = 1;
     var PROVEN2 = 2;
-    function isRecursive2(inst, stack, resolve2) {
+    function isRecursive2(inst, stack, resolve3) {
       const cached2 = recursive2.get(inst);
       if (cached2 !== void 0)
         return cached2 ? PROVEN2 : NONE2;
@@ -4869,7 +4869,7 @@ var require_memoizer = __commonJS({
       let result = NONE2;
       const check2 = (child) => {
         if (result !== PROVEN2 && child?._zod) {
-          const answer = isRecursive2(child, stack, resolve2);
+          const answer = isRecursive2(child, stack, resolve3);
           if (answer > result)
             result = answer;
         }
@@ -4880,7 +4880,7 @@ var require_memoizer = __commonJS({
           const desc = Object.getOwnPropertyDescriptor(sh, key);
           if (spread && !desc.enumerable)
             continue;
-          const child = desc.get ? ASSUMED2 : desc.value?._zod ? isRecursive2(desc.value, stack, resolve2) : NONE2;
+          const child = desc.get ? ASSUMED2 : desc.value?._zod ? isRecursive2(desc.value, stack, resolve3) : NONE2;
           if (child > answer)
             answer = child;
         }
@@ -4944,7 +4944,7 @@ var require_memoizer = __commonJS({
           break;
         // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
         case "lazy": {
-          const inner = def._cachedInner ?? (resolve2 ? inst._zod.innerType : void 0);
+          const inner = def._cachedInner ?? (resolve3 ? inst._zod.innerType : void 0);
           merge2(inner ? isRecursive2(inner, stack, false) : ASSUMED2);
           break;
         }
@@ -62953,7 +62953,7 @@ async function extractImages$1(data, pageNumber) {
     for (let i2 = 0; i2 < operatorList.fnArray.length; i2++) {
       if (operatorList.fnArray[i2] !== OPS.paintImageXObject) continue;
       const imageKey = operatorList.argsArray[i2][0];
-      const image = await new Promise((resolve2) => (imageKey.startsWith("g_") ? page.commonObjs : page.objs).get(imageKey, resolve2));
+      const image = await new Promise((resolve3) => (imageKey.startsWith("g_") ? page.commonObjs : page.objs).get(imageKey, resolve3));
       if (!image || !image.data || !image.width || !image.height) continue;
       const { width, height, data: data2 } = image;
       const calculatedChannels = data2.length / (width * height);
@@ -62998,8 +62998,8 @@ async function renderPageAsImage$1(data, pageNumber, options = {}) {
         const buffer = await canvas.encode("png");
         return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
       }
-      const blob = await new Promise((resolve2) => {
-        canvas.toBlob(resolve2);
+      const blob = await new Promise((resolve3) => {
+        canvas.toBlob(resolve3);
       });
       if (!blob) throw new Error("Failed to encode canvas to a PNG blob.");
       return await blob.arrayBuffer();
@@ -63199,6 +63199,31 @@ var init_dist = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/cancel/index.js
+import { AsyncLocalStorage } from "node:async_hooks";
+var storage = new AsyncLocalStorage();
+function withCallSignal(signal, fn2, request) {
+  return signal ? storage.run({ signal, ...request ? { request } : {} }, fn2) : fn2();
+}
+function currentCallSignal() {
+  return storage.getStore()?.signal;
+}
+function withAmbientCancellation(own2) {
+  const ambient = currentCallSignal();
+  if (!ambient)
+    return own2;
+  if (!own2)
+    return ambient;
+  return AbortSignal.any([own2, ambient]);
+}
+
+// node_modules/@chrischall/mcp-utils/dist/caller/index.js
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+var storage2 = new AsyncLocalStorage2();
+function withCallerCapabilities(capabilities, fn2) {
+  return capabilities ? storage2.run(capabilities, fn2) : fn2();
+}
+
 // node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
 var __create2 = Object.create;
 var __defProp2 = Object.defineProperty;
@@ -67601,14 +67626,14 @@ function inputRequiredRoundsExceededMessage(method, maxRounds) {
   return `Multi-round-trip request '${method}' still required input after ${maxRounds} rounds (inputRequired.maxRounds)`;
 }
 function sleep(ms2, signal) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     if (signal?.aborted) {
       reject(signal.reason instanceof SdkError ? signal.reason : new SdkError(SdkErrorCode.RequestTimeout, String(signal.reason)));
       return;
     }
     const timer = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve2();
+      resolve3();
     }, ms2);
     const onAbort = () => {
       clearTimeout(timer);
@@ -68402,7 +68427,7 @@ var Protocol = class {
     const flowStartedAt = Date.now();
     let onAbort;
     let cleanupMessageId;
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const earlyReject = (error62) => {
         reject(error62);
       };
@@ -68470,7 +68495,7 @@ var Protocol = class {
         }
         if (decoded.kind === "invalid") return reject(decoded.error);
         if (decoded.kind === "input_required") {
-          if (options?.allowInputRequired === true) return resolve2(manualInputRequiredValue(decoded));
+          if (options?.allowInputRequired === true) return resolve3(manualInputRequiredValue(decoded));
           const flow = {
             codec: codec2,
             request,
@@ -68482,11 +68507,11 @@ var Protocol = class {
               params
             }, resultSchema, legOptions)
           };
-          return resolve2(this._resolveNonCompleteResult(decoded, flow));
+          return resolve3(this._resolveNonCompleteResult(decoded, flow));
         }
         const result = decoded.result;
         validateStandardSchema(resultSchema, result).then((parseResult) => {
-          if (parseResult.success) resolve2(parseResult.data);
+          if (parseResult.success) resolve3(parseResult.data);
           else reject(new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${request.method}: ${parseResult.error}`));
         }, reject);
       });
@@ -71398,7 +71423,7 @@ var require_compile2 = /* @__PURE__ */ __commonJSMin(((exports) => {
     ref = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, ref);
     const schOrFunc = root.refs[ref];
     if (schOrFunc) return schOrFunc;
-    let _sch = resolve2.call(this, root, ref);
+    let _sch = resolve3.call(this, root, ref);
     if (_sch === void 0) {
       const schema = (_a4 = root.localRefs) === null || _a4 === void 0 ? void 0 : _a4[ref];
       const { schemaId } = this.opts;
@@ -71424,7 +71449,7 @@ var require_compile2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve2(root, ref) {
+  function resolve3(root, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string") ref = sch;
     return sch || this.schemas[ref] || resolveSchema.call(this, root, ref);
@@ -71874,47 +71899,47 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     else if (typeof uri === "object") uri = parse3(serialize(uri, options), options);
     return uri;
   }
-  function resolve2(baseURI, relativeURI, options) {
+  function resolve3(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base, relative, options, skipNormalization) {
+  function resolveComponent(base, relative2, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base = parse3(serialize(base, options), options);
-      relative = parse3(serialize(relative, options), options);
+      relative2 = parse3(serialize(relative2, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative.scheme) {
-      target.scheme = relative.scheme;
-      target.userinfo = relative.userinfo;
-      target.host = relative.host;
-      target.port = relative.port;
-      target.path = removeDotSegments(relative.path || "");
-      target.query = relative.query;
+    if (!options.tolerant && relative2.scheme) {
+      target.scheme = relative2.scheme;
+      target.userinfo = relative2.userinfo;
+      target.host = relative2.host;
+      target.port = relative2.port;
+      target.path = removeDotSegments(relative2.path || "");
+      target.query = relative2.query;
     } else {
-      if (relative.userinfo !== void 0 || relative.host !== void 0 || relative.port !== void 0) {
-        target.userinfo = relative.userinfo;
-        target.host = relative.host;
-        target.port = relative.port;
-        target.path = removeDotSegments(relative.path || "");
-        target.query = relative.query;
+      if (relative2.userinfo !== void 0 || relative2.host !== void 0 || relative2.port !== void 0) {
+        target.userinfo = relative2.userinfo;
+        target.host = relative2.host;
+        target.port = relative2.port;
+        target.path = removeDotSegments(relative2.path || "");
+        target.query = relative2.query;
       } else {
-        if (!relative.path) {
+        if (!relative2.path) {
           target.path = base.path;
-          if (relative.query !== void 0) target.query = relative.query;
+          if (relative2.query !== void 0) target.query = relative2.query;
           else target.query = base.query;
         } else {
-          if (relative.path[0] === "/") target.path = removeDotSegments(relative.path);
+          if (relative2.path[0] === "/") target.path = removeDotSegments(relative2.path);
           else {
-            if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) target.path = "/" + relative.path;
-            else if (!base.path) target.path = relative.path;
-            else target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
+            if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) target.path = "/" + relative2.path;
+            else if (!base.path) target.path = relative2.path;
+            else target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative2.path;
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative.query;
+          target.query = relative2.query;
         }
         target.userinfo = base.userinfo;
         target.host = base.host;
@@ -71922,7 +71947,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       }
       target.scheme = base.scheme;
     }
-    target.fragment = relative.fragment;
+    target.fragment = relative2.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -72048,7 +72073,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
   const fastUri = {
     SCHEMES,
     normalize,
-    resolve: resolve2,
+    resolve: resolve3,
     resolveComponent,
     equal,
     serialize,
@@ -77421,7 +77446,7 @@ var StdioServerTransport = class {
   }
   send(message) {
     if (this._closed) return Promise.reject(/* @__PURE__ */ new Error("StdioServerTransport is closed"));
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const json2 = serializeMessage(message);
       let settled = false;
       const onError = (error62) => {
@@ -77436,14 +77461,14 @@ var StdioServerTransport = class {
         settled = true;
         this._stdout.off("error", onError);
         this._stdout.off("drain", onDrain);
-        resolve2();
+        resolve3();
       };
       this._stdout.once("error", onError);
       if (this._stdout.write(json2)) {
         if (settled) return;
         settled = true;
         this._stdout.off("error", onError);
-        resolve2();
+        resolve3();
       } else if (!settled) this._stdout.once("drain", onDrain);
     });
   }
@@ -77497,14 +77522,14 @@ var StdioConnectionChannel = class {
   */
   async whenRequestsAnswered(timeoutMs) {
     if (this._closed || this._pendingRequests.size === 0) return true;
-    return await new Promise((resolve2) => {
+    return await new Promise((resolve3) => {
       const waiter = () => {
         clearTimeout(timer);
-        resolve2(true);
+        resolve3(true);
       };
       const timer = setTimeout(() => {
         this._drainWaiters = this._drainWaiters.filter((pending) => pending !== waiter);
-        resolve2(false);
+        resolve3(false);
       }, timeoutMs);
       this._drainWaiters.push(waiter);
     });
@@ -77875,13 +77900,28 @@ var API_KEY_RE = new RegExp([
   "whsec_[A-Za-z0-9]{16,}\\b"
   // webhook signing secret (Stripe-style)
 ].map((p2) => `\\b${p2}`).join("|"), "g");
-var QUERY_SECRET_RE = /([?&](?:access_token|refresh_token|client_secret|api_?key|signature|token|key|sig)=)[^&#\s"'<>`]+/gi;
+var QUERY_SECRET_RE = /([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig)=)[^&#\s"'<>`]+/gi;
+var OAUTH_CODE_RE = /([?&]code=)(?=[^&#\s"'<>`]{16,})[^&#\s"'<>`]+/gi;
+var FORM_PASSWORD_RE = /((?:^|[\s,;:"'(\[{])(?:password|passwd)=)[^&#\s"'<>`]+/gim;
+var HEADER_SECRET_RE = /(\b(?:x[-_][a-z0-9_-]*?(?:api[-_]?key|token|secret|auth)[a-z0-9_-]*|api[-_]?key)\s*:\s*)[^\s,;"'<>`]+/gi;
 var AWS_SIGV4_RE = /([?&]X-Amz-(?:Signature|Security-Token|Credential)=)[^&#\s"'<>`]+/gi;
-var JSON_SECRET_KEYS = "access_token|refresh_token|client_secret|api_?key|password|passwd|secret|token";
-var JSON_SECRET_DQ_RE = new RegExp(`("(?:${JSON_SECRET_KEYS})"\\s*:\\s*")[^"]*(")`, "gi");
-var JSON_SECRET_SQ_RE = new RegExp(`('(?:${JSON_SECRET_KEYS})'\\s*:\\s*')[^']*(')`, "gi");
+var JSON_SECRET_KEYS = [
+  "(?:access|refresh|id|auth|session|bearer|csrf|xsrf)[_-]?token",
+  "client[_-]?secret",
+  "api[_-]?secret",
+  "(?:x[_-])?api[_-]?key",
+  "private[_-]?key",
+  "x[_-][a-z0-9_-]*?(?:api[_-]?key|token|secret|auth)[a-z0-9_-]*",
+  "(?:proxy-)?authorization",
+  "password",
+  "passwd",
+  "secret",
+  "token"
+].join("|");
+var JSON_SECRET_DQ_RE = new RegExp(`("(?:${JSON_SECRET_KEYS})"\\s*:\\s*")(?:[^"\\\\]|\\\\.)*(")`, "gi");
+var JSON_SECRET_SQ_RE = new RegExp(`('(?:${JSON_SECRET_KEYS})'\\s*:\\s*')(?:[^'\\\\]|\\\\.)*(')`, "gi");
 function redactSecrets(text) {
-  return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JWT_RE, "[REDACTED]");
+  return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(HEADER_SECRET_RE, "$1[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(OAUTH_CODE_RE, "$1[REDACTED]").replace(FORM_PASSWORD_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JWT_RE, "[REDACTED]");
 }
 function truncateErrorMessage(text, max = DEFAULT_ERROR_MESSAGE_MAX) {
   const str = text === null || text === void 0 ? "" : String(text);
@@ -82922,7 +82962,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve2) {
+function isRecursive(inst, stack, resolve3) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -82932,7 +82972,7 @@ function isRecursive(inst, stack, resolve2) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve2);
+      const answer = isRecursive(child, stack, resolve3);
       if (answer > result)
         result = answer;
     }
@@ -82943,7 +82983,7 @@ function isRecursive(inst, stack, resolve2) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve2) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve3) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -83007,7 +83047,7 @@ function isRecursive(inst, stack, resolve2) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve2 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve3 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -97689,17 +97729,73 @@ Hint: ${err.hint}`);
   }
   throw err;
 }
+function mcpRequestFrom(args) {
+  const ctx = args.at(-1);
+  if (typeof ctx !== "object" || ctx === null)
+    return void 0;
+  const req = ctx.mcpReq;
+  if (typeof req !== "object" || req === null)
+    return void 0;
+  return typeof req.notify === "function" ? req : void 0;
+}
+function callSignalFrom(args) {
+  const ctx = args.at(-1);
+  if (typeof ctx !== "object" || ctx === null)
+    return void 0;
+  const req = ctx.mcpReq;
+  if (typeof req !== "object" || req === null)
+    return void 0;
+  const signal = req.signal;
+  return signal instanceof AbortSignal ? signal : void 0;
+}
+function declaredCapabilitiesFrom(server) {
+  const inner = server.server;
+  if (typeof inner !== "object" || inner === null)
+    return void 0;
+  const read = inner.getClientCapabilities;
+  if (typeof read !== "function")
+    return void 0;
+  try {
+    const declared = read.call(inner);
+    return typeof declared === "object" && declared !== null ? declared : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function surfaceToolHints(server) {
   const register2 = server.registerTool.bind(server);
-  server.registerTool = (name, config2, cb) => register2(name, config2, (...args) => {
-    let result;
-    try {
-      result = cb(...args);
-    } catch (err) {
-      return hintResultOrRethrow(err);
-    }
-    return result instanceof Promise ? result.catch(hintResultOrRethrow) : result;
-  });
+  server.registerTool = (name, config2, cb) => register2(name, config2, (...args) => (
+    // THE CALLER'S CANCELLATION, made ambient for the whole handler
+    // (`cancel/index.ts`). The SDK delivers it and the fleet ignored it:
+    // measured against @modelcontextprotocol/server 2.0.0, a cancelled
+    // call aborts `ctx.mcpReq.signal` with the caller's reason and the
+    // handler runs to completion regardless — so the HTTP request stays
+    // in flight, the child keeps burning metered CPU, and the upstream
+    // keeps being hit for somebody who has gone. claude.ai sent 101
+    // cancellations in the week to 2026-09-20.
+    //
+    // Here because this is the one wrapper every tool already passes
+    // through: threading the signal by hand would mean editing several
+    // hundred handlers and missing exactly the ones nobody edits.
+    withCallSignal(callSignalFrom(args), () => (
+      // WHAT THE CALLER CAN DO, made ambient for the same reason and in
+      // the same place (`caller/index.ts`). Only the 2025-era half needs
+      // the wrapper — a 2026-07-28 request answers for itself off its own
+      // envelope — but a guarded tool that cannot tell whether the caller
+      // can be shown a prompt returns one the SDK then refuses to deliver,
+      // and that refusal reaches the caller as an unexplained protocol
+      // error it had no chance to catch.
+      withCallerCapabilities(declaredCapabilitiesFrom(server), () => {
+        let result;
+        try {
+          result = cb(...args);
+        } catch (err) {
+          return hintResultOrRethrow(err);
+        }
+        return result instanceof Promise ? result.catch(hintResultOrRethrow) : result;
+      })
+    ), mcpRequestFrom(args))
+  ));
 }
 async function createMcpServer(opts) {
   const server = new McpServer({ name: opts.name, version: opts.version }, { supportedProtocolVersions: [...SERVER_PROTOCOL_VERSIONS] });
@@ -97714,13 +97810,47 @@ async function createMcpServer(opts) {
   }
   return server;
 }
+var DEFAULT_SHUTDOWN_TIMEOUT_MS = 5e3;
+var DEFAULT_REPEAT_SIGNAL_GRACE_MS = 500;
 function withGracefulShutdown(target, opts = {}) {
   const shouldExit = opts.exit ?? true;
+  if (opts.timeoutMs !== void 0 && !(Number.isFinite(opts.timeoutMs) && opts.timeoutMs > 0)) {
+    throw new RangeError("withGracefulShutdown: timeoutMs must be a finite number greater than 0.");
+  }
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;
+  if (opts.repeatSignalGraceMs !== void 0 && !(Number.isFinite(opts.repeatSignalGraceMs) && opts.repeatSignalGraceMs >= 0)) {
+    throw new RangeError("withGracefulShutdown: repeatSignalGraceMs must be a finite number >= 0.");
+  }
+  const repeatGraceMs = opts.repeatSignalGraceMs ?? DEFAULT_REPEAT_SIGNAL_GRACE_MS;
   let shuttingDown = false;
+  let firstSignalAt = 0;
+  let exited = false;
+  const exitOnce = () => {
+    if (exited)
+      return;
+    exited = true;
+    process.exit(0);
+  };
   const handler = (signal) => {
-    if (shuttingDown)
+    if (shuttingDown) {
+      if (Date.now() - firstSignalAt < repeatGraceMs)
+        return;
+      if (shouldExit) {
+        console.error(`[mcp-utils] second ${signal} during shutdown \u2014 exiting now`);
+        exitOnce();
+      }
       return;
+    }
     shuttingDown = true;
+    firstSignalAt = Date.now();
+    let timer;
+    if (shouldExit) {
+      timer = setTimeout(() => {
+        console.error(`[mcp-utils] graceful shutdown on ${signal} did not finish in ${timeoutMs}ms \u2014 exiting`);
+        exitOnce();
+      }, timeoutMs);
+      timer.unref?.();
+    }
     void (async () => {
       try {
         if (opts.onSignal)
@@ -97729,8 +97859,10 @@ function withGracefulShutdown(target, opts = {}) {
       } catch (err) {
         console.error(`[mcp-utils] error during graceful shutdown on ${signal}: ${err instanceof Error ? err.message : String(err)}`);
       } finally {
+        if (timer !== void 0)
+          clearTimeout(timer);
         if (shouldExit)
-          process.exit(0);
+          exitOnce();
       }
     })();
   };
@@ -97800,14 +97932,55 @@ async function loadDotenvSafely(opts = {}) {
   }
 }
 
+// node_modules/@chrischall/mcp-utils/dist/fs/confine.js
+import { existsSync, realpathSync } from "node:fs";
+import { dirname, isAbsolute as isAbsolute2, relative, resolve as resolve2, sep } from "node:path";
+function isInside(root, target) {
+  const rel = relative(root, target);
+  return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute2(rel);
+}
+function realPathAllowingMissing(p2) {
+  const abs = resolve2(p2);
+  let existing = abs;
+  const tail = [];
+  while (!existsSync(existing)) {
+    const parent = dirname(existing);
+    if (parent === existing)
+      break;
+    tail.unshift(existing.slice(parent.length).replace(/^[/\\]+/, ""));
+    existing = parent;
+  }
+  let real;
+  try {
+    real = realpathSync(existing);
+  } catch {
+    real = existing;
+  }
+  return tail.length > 0 ? resolve2(real, ...tail) : real;
+}
+function assertPathWithinRoots(path, roots) {
+  const target = realPathAllowingMissing(expandPath(path));
+  for (const root of roots) {
+    if (isInside(realPathAllowingMissing(expandPath(root)), target))
+      return target;
+  }
+  throw new Error(`Path is outside the allowed directories: ${path}`);
+}
+
 // node_modules/@chrischall/mcp-utils/dist/fs/output.js
-import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync2, mkdirSync, writeFileSync } from "node:fs";
 import { join as join2 } from "node:path";
 function resolveOutputDir(perCall, envVar, opts = {}) {
   const raw = perCall ?? readEnvVar(envVar, opts.env ? { env: opts.env } : {});
   if (!raw)
     return process.cwd();
   const dir = expandPath(raw);
+  if (perCall !== void 0 && opts.allowedRoots) {
+    assertPathWithinRoots(dir, opts.allowedRoots);
+    mkdirSync(dir, { recursive: true });
+    assertPathWithinRoots(dir, opts.allowedRoots);
+    return dir;
+  }
   mkdirSync(dir, { recursive: true });
   return dir;
 }
@@ -97818,11 +97991,11 @@ function sanitizeBaseName(base) {
 function uniquePath(dir, base, ext) {
   const safe = sanitizeBaseName(base);
   const first = join2(dir, `${safe}.${ext}`);
-  if (!existsSync(first))
+  if (!existsSync2(first))
     return first;
   for (let n2 = 2; ; n2++) {
     const candidate = join2(dir, `${safe}-${n2}.${ext}`);
-    if (!existsSync(candidate))
+    if (!existsSync2(candidate))
       return candidate;
   }
 }
@@ -97925,23 +98098,78 @@ function createApiClient(opts) {
   const retryStatuses = retry.statuses ?? [429];
   const timeoutMs = opts.timeout;
   const authHeader = (token) => !token ? {} : opts.tokenHeader ? { [opts.tokenHeader]: token } : { Authorization: `Bearer ${token}` };
-  function withTimeout(run) {
-    if (timeoutMs == null || timeoutMs <= 0)
-      return run(void 0);
+  async function withTimeout(run) {
+    if (timeoutMs == null || timeoutMs <= 0) {
+      const res2 = await run(withAmbientCancellation(void 0));
+      return { res: res2, done: () => {
+      }, expired: void 0 };
+    }
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
-    return run(controller.signal).catch((err) => {
-      if (err instanceof Error && err.name === "AbortError")
+    let res;
+    try {
+      res = await run(withAmbientCancellation(controller.signal));
+    } catch (err) {
+      clearTimeout(timer);
+      if (err instanceof Error && err.name === "AbortError" && controller.signal.aborted) {
         throw new RequestTimeoutError(service, timeoutMs);
+      }
       throw err;
-    }).finally(() => clearTimeout(timer));
+    }
+    const expired = new Promise((_resolve, reject) => {
+      controller.signal.addEventListener("abort", () => reject(new RequestTimeoutError(service, timeoutMs)), {
+        once: true
+      });
+    });
+    expired.catch(() => {
+    });
+    return { res, done: () => clearTimeout(timer), expired };
+  }
+  async function readBody(attempt, read) {
+    try {
+      if (!attempt.expired)
+        return await read(attempt.res);
+      return await Promise.race([read(attempt.res), attempt.expired]);
+    } catch (err) {
+      if (err instanceof RequestTimeoutError) {
+        attempt.res.body?.cancel().catch(() => {
+        });
+      }
+      throw err;
+    } finally {
+      attempt.done();
+    }
+  }
+  const baseParts = (() => {
+    try {
+      const u2 = new URL(base);
+      return { origin: u2.origin, username: u2.username, password: u2.password };
+    } catch {
+      return void 0;
+    }
+  })();
+  const baseOrigin = baseParts?.origin;
+  function resolveUrl(path, query) {
+    const url4 = `${base}${path}${query}`;
+    if (baseOrigin === void 0)
+      return url4;
+    let parsed;
+    try {
+      parsed = new URL(url4);
+    } catch {
+      throw new Error(`Refusing request to ${service}: path ${JSON.stringify(path)} does not form a valid URL.`);
+    }
+    if (parsed.origin !== baseOrigin || parsed.username !== baseParts?.username || parsed.password !== baseParts?.password) {
+      throw new Error(`Refusing request to ${service}: path ${JSON.stringify(path)} resolves outside the base origin ${baseOrigin}. Paths must be relative to baseUrl (start them with "/").`);
+    }
+    return url4;
   }
   async function send(method, path, opt) {
     const isMultipart = opt.formData !== void 0;
     const hasJsonBody = !isMultipart && opt.body !== void 0;
     const reqBody = isMultipart ? opt.formData : hasJsonBody ? JSON.stringify(opt.body) : void 0;
     const query = opt.query ? buildQueryString(opt.query) : "";
-    const url4 = `${base}${path}${query}`;
+    const url4 = resolveUrl(path, query);
     const bodyInit = reqBody !== void 0 ? { body: reqBody } : {};
     const fetchWith = (token, signal) => doFetch(url4, {
       method,
@@ -97958,8 +98186,10 @@ function createApiClient(opts) {
     const once = () => withTimeout((signal) => opts.tokenManager ? opts.tokenManager.withAuth((token) => fetchWith(token, signal)) : (async () => fetchWith(await opts.getToken?.() || void 0, signal))());
     let attempt = 0;
     for (; ; ) {
-      const res = await once();
+      const current = await once();
+      const res = current.res;
       if (retryStatuses.includes(res.status) && attempt < retry.count) {
+        current.done();
         attempt += 1;
         const delay = retry.honorRetryAfter ? parseRetryAfterMs(res.headers.get("retry-after"), {
           defaultMs: retry.delayMs,
@@ -97968,18 +98198,21 @@ function createApiClient(opts) {
         await sleep2(delay);
         continue;
       }
-      return res;
+      return current;
     }
   }
   async function fetchJson(method, path, opt = {}) {
-    const res = await send(method, path, opt);
+    const attempt = await send(method, path, opt);
+    const res = attempt.res;
+    if (res.status === 401 || res.status === 429 || res.status === 204)
+      attempt.done();
     if (res.status === 401)
       throw unauthorized();
     if (res.status === 429)
       throw rateLimited();
     if (res.status === 204)
       return void 0;
-    const text = await res.text();
+    const text = await readBody(attempt, (r2) => r2.text());
     if (!res.ok) {
       throw new ApiError(res.status, formatApiError(res.status, method, path, text, { service }));
     }
@@ -97989,12 +98222,15 @@ function createApiClient(opts) {
   }
   async function fetchHtml(method, path, opt = {}) {
     const headers = { Accept: "text/html,*/*", ...opt.headers };
-    const res = await send(method, path, { ...opt, headers });
+    const attempt = await send(method, path, { ...opt, headers });
+    const res = attempt.res;
+    if (res.status === 401 || res.status === 429)
+      attempt.done();
     if (res.status === 401)
       throw unauthorized();
     if (res.status === 429)
       throw rateLimited();
-    const text = await res.text();
+    const text = await readBody(attempt, (r2) => r2.text());
     if (!res.ok) {
       throw new ApiError(res.status, formatApiError(res.status, method, path, text, { service }));
     }
@@ -98002,16 +98238,23 @@ function createApiClient(opts) {
   }
   async function fetchRaw(method, path, opt = {}) {
     const headers = { Accept: "*/*", ...opt.headers };
-    const res = await send(method, path, { ...opt, headers });
+    const attempt = await send(method, path, { ...opt, headers });
+    const res = attempt.res;
+    if (res.status === 401 || res.status === 429)
+      attempt.done();
     if (res.status === 401)
       throw unauthorized();
     if (res.status === 429)
       throw rateLimited();
     if (!res.ok) {
-      const text = await res.text().catch(() => "");
+      const text = await readBody(attempt, (r2) => r2.text()).catch((err) => {
+        if (err instanceof RequestTimeoutError)
+          throw err;
+        return "";
+      });
       throw new ApiError(res.status, formatApiError(res.status, method, path, text, { service }));
     }
-    const bytes = new Uint8Array(await res.arrayBuffer());
+    const bytes = new Uint8Array(await readBody(attempt, (r2) => r2.arrayBuffer()));
     return {
       status: res.status,
       contentType: res.headers.get("content-type"),
@@ -98065,10 +98308,10 @@ var pageSchema = {
 };
 
 // src/client.ts
-import { dirname, join as join3 } from "path";
+import { dirname as dirname2, join as join3 } from "path";
 import { fileURLToPath } from "url";
 try {
-  const dir = dirname(fileURLToPath(import.meta.url));
+  const dir = dirname2(fileURLToPath(import.meta.url));
   await loadDotenvSafely({ path: join3(dir, "..", ".env"), override: false });
 } catch {
 }
@@ -98097,6 +98340,25 @@ function redactAssetQuery(err, search) {
   if (message === err.message) return err;
   return err instanceof ApiError ? new ApiError(err.status, message) : new Error(message);
 }
+function flattenErrors(errors) {
+  if (errors == null) return [];
+  if (typeof errors === "string") return errors ? [errors] : [];
+  if (Array.isArray(errors)) return errors.flatMap((e2) => flattenErrors(e2));
+  if (typeof errors === "object") {
+    return Object.entries(errors).flatMap(
+      ([field, value]) => flattenErrors(value).map((msg) => field === "base" ? msg : `${field}: ${msg}`)
+    );
+  }
+  return [String(errors)];
+}
+function assertWriteSucceeded(data) {
+  if (data === null || typeof data !== "object" || Array.isArray(data)) return;
+  const record4 = data;
+  const messages = flattenErrors(record4.errors);
+  if (messages.length === 0 && record4.success !== false) return;
+  const detail = messages.length > 0 ? messages.join("; ") : "success: false with no error detail";
+  throw new Error(`Splitwise rejected the request: ${detail}`);
+}
 var SplitwiseClient = class {
   apiKey;
   /** Which source supplied the API key — a LABEL, never the value. */
@@ -98161,7 +98423,9 @@ var SplitwiseClient = class {
     return this.apiKey;
   }
   async request(method, path, body) {
-    return this.api.fetchJson(method, path, body !== void 0 ? { body } : {});
+    const data = await this.api.fetchJson(method, path, body !== void 0 ? { body } : {});
+    if (method.toUpperCase() !== "GET") assertWriteSucceeded(data);
+    return data;
   }
   /**
    * Fetch the raw bytes behind an absolute asset URL the API handed back (an
@@ -98345,34 +98609,36 @@ function registerUserTools(server, client2) {
   server.registerTool(
     "sw_update_user",
     {
-      description: "Update the current user's profile fields. id must be the current user's id.",
+      description: "Update the current user's profile fields: name, locale and default currency. id must be the current user's id. The login email and password are deliberately not settable here \u2014 account credentials are changed in the Splitwise app, not by an assistant.",
+      annotations: { readOnlyHint: false, destructiveHint: true },
+      // No `email` / `password`: changing the login email is an account
+      // takeover primitive (a password reset to the new address follows), and
+      // the only gate would be a model-set `confirm` that injected text from
+      // comments, notifications or receipts could talk it into (fleet-audit
+      // #250). z.object strips unknown keys, so a caller passing them anyway
+      // has them dropped before the request is built.
       inputSchema: external_exports.object({
         id: external_exports.number().describe("User ID (must be the current user's id)"),
         first_name: external_exports.string().optional(),
         last_name: external_exports.string().optional(),
-        email: external_exports.string().optional(),
-        password: external_exports.string().optional(),
         locale: external_exports.string().optional(),
         default_currency: external_exports.string().optional(),
         confirm: schemaConfirm
       })
     },
-    async ({ id, first_name, last_name, email: email4, password, locale, default_currency, confirm }) => {
+    async ({ id, first_name, last_name, locale, default_currency, confirm }) => {
       const body = pruneUndefined({
         first_name,
         last_name,
-        email: email4,
-        password,
         locale,
         default_currency
       });
-      const previewBody = { ...body, ...password !== void 0 ? { password: "[hidden]" } : {} };
       const gate = previewUnlessConfirmed(
         confirm,
         `Update current Splitwise user ${id} profile`,
         "POST",
         `/update_user/${id}`,
-        previewBody
+        body
       );
       if (gate) return gate;
       const data = await client2.request("POST", `/update_user/${id}`, body);
@@ -99244,7 +99510,7 @@ function registerUtilityTools(server, client2) {
 // src/index.ts
 await runMcp({
   name: "splitwise-mcp",
-  version: "3.1.0",
+  version: "3.1.2",
   // x-release-please-version
   deps: client,
   banner: "[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.",

package/dist/client.js

@@ -59,6 +59,37 @@ function redactAssetQuery(err, search) {
         return err;
     return err instanceof ApiError ? new ApiError(err.status, message) : new Error(message);
 }
+/** Flatten Splitwise's `errors` value (`{field: [msg]}`, `[msg]` or a string) into messages. */
+function flattenErrors(errors) {
+    if (errors == null)
+        return [];
+    if (typeof errors === 'string')
+        return errors ? [errors] : [];
+    if (Array.isArray(errors))
+        return errors.flatMap((e) => flattenErrors(e));
+    if (typeof errors === 'object') {
+        return Object.entries(errors).flatMap(([field, value]) => flattenErrors(value).map((msg) => (field === 'base' ? msg : `${field}: ${msg}`)));
+    }
+    return [String(errors)];
+}
+/**
+ * Splitwise answers a failed write with HTTP 200, not an error status:
+ * create/update return `{expenses: [], errors: {...}}` and delete/undelete
+ * return `{success: false, errors: {...}}`. `fetchJson` only throws on
+ * non-2xx, so without this check a rejected write reaches the tool as an
+ * ordinary result and reads as "created"/"deleted". Throwing here makes every
+ * write tool report it with `isError`.
+ */
+function assertWriteSucceeded(data) {
+    if (data === null || typeof data !== 'object' || Array.isArray(data))
+        return;
+    const record = data;
+    const messages = flattenErrors(record.errors);
+    if (messages.length === 0 && record.success !== false)
+        return;
+    const detail = messages.length > 0 ? messages.join('; ') : 'success: false with no error detail';
+    throw new Error(`Splitwise rejected the request: ${detail}`);
+}
 export class SplitwiseClient {
     apiKey;
     /** Which source supplied the API key — a LABEL, never the value. */
@@ -138,7 +169,10 @@ export class SplitwiseClient {
         return this.apiKey;
     }
     async request(method, path, body) {
-        return this.api.fetchJson(method, path, body !== undefined ? { body } : {});
+        const data = await this.api.fetchJson(method, path, body !== undefined ? { body } : {});
+        if (method.toUpperCase() !== 'GET')
+            assertWriteSucceeded(data);
+        return data;
     }
     /**
      * Fetch the raw bytes behind an absolute asset URL the API handed back (an

package/dist/index.js

@@ -19,7 +19,7 @@ import { registerUtilityTools } from './tools/utilities.js';
 // client into the same registrars instead of this singleton.
 await runMcp({
     name: 'splitwise-mcp',
-    version: '3.1.0', // x-release-please-version
+    version: '3.1.2', // x-release-please-version
     deps: client,
     banner: '[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.',
     tools: [

package/dist/tools/user.js

@@ -25,29 +25,30 @@ export function registerUserTools(server, client) {
         return minifiedResult(viewUser(resolveView(view, SW_VIEWS), data));
     });
     server.registerTool('sw_update_user', {
-        description: "Update the current user's profile fields. id must be the current user's id.",
+        description: "Update the current user's profile fields: name, locale and default currency. id must be the current user's id. The login email and password are deliberately not settable here — account credentials are changed in the Splitwise app, not by an assistant.",
+        annotations: { readOnlyHint: false, destructiveHint: true },
+        // No `email` / `password`: changing the login email is an account
+        // takeover primitive (a password reset to the new address follows), and
+        // the only gate would be a model-set `confirm` that injected text from
+        // comments, notifications or receipts could talk it into (fleet-audit
+        // #250). z.object strips unknown keys, so a caller passing them anyway
+        // has them dropped before the request is built.
         inputSchema: z.object({
             id: z.number().describe("User ID (must be the current user's id)"),
             first_name: z.string().optional(),
             last_name: z.string().optional(),
-            email: z.string().optional(),
-            password: z.string().optional(),
             locale: z.string().optional(),
             default_currency: z.string().optional(),
             confirm: schemaConfirm,
         }),
-    }, async ({ id, first_name, last_name, email, password, locale, default_currency, confirm }) => {
+    }, async ({ id, first_name, last_name, locale, default_currency, confirm }) => {
         const body = pruneUndefined({
             first_name,
             last_name,
-            email,
-            password,
             locale,
             default_currency,
         });
-        // Never echo the password in the dry-run preview.
-        const previewBody = { ...body, ...(password !== undefined ? { password: '[hidden]' } : {}) };
-        const gate = previewUnlessConfirmed(confirm, `Update current Splitwise user ${id} profile`, 'POST', `/update_user/${id}`, previewBody);
+        const gate = previewUnlessConfirmed(confirm, `Update current Splitwise user ${id} profile`, 'POST', `/update_user/${id}`, body);
         if (gate)
             return gate;
         const data = await client.request('POST', `/update_user/${id}`, body);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "splitwise-mcp",
-  "version": "3.1.0",
+  "version": "3.1.2",
   "mcpName": "io.github.chrischall/splitwise-mcp",
   "description": "Splitwise MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -45,11 +45,11 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^1.0.0",
+    "@chrischall/mcp-utils": "^2.4.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "dotenv": "^17.4.0",
     "unpdf": "^1.8.1",
-    "zod": "^4.6.2"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "^2.0.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/splitwise-mcp",
     "source": "github"
   },
-  "version": "3.1.0",
+  "version": "3.1.2",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "splitwise-mcp",
-      "version": "3.1.0",
+      "version": "3.1.2",
       "transport": {
         "type": "stdio"
       },